CVE-2026-60002

Опубликовано: 09 июл. 2026

Источник: msrc

CVSS3: 7.7

EPSS Низкий

Описание

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

EPSS

Процентиль: 22%

0.003

Низкий

7.7 High

CVSS3

Связанные уязвимости

CVE-2026-60002

CVSS3: 7.7

ubuntu

2 месяца назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

CVE-2026-60002

CVSS3: 7.7

redhat

2 месяца назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

CVE-2026-60002

CVSS3: 7.7

nvd

2 месяца назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

CVE-2026-60002

CVSS3: 7.7

debian

2 месяца назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server cha ...

GHSA-gp5v-jg37-fvg6

CVSS3: 7.7

github

2 месяца назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

EPSS

Процентиль: 22%

0.003

Низкий

7.7 High

CVSS3